CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in formsintegrations Integration of Zoho CRM and Contact Form 7 allows Phishing. This issue affects Integration of Zoho CRM and Contact Form 7: from n/a through 1.0.6.
Explanation of Vulnerability in Simple Terms
The Integration of Zoho CRM and Contact Form 7 plugin contains an open redirect vulnerability. An attacker can craft a malicious link that redirects users to an external website after they interact with the form. This can be used to phish credentials or distribute malware. The vulnerability requires user interaction and affects versions up to 1.0.6.
What an attacker can do
Redirect site visitors to a malicious external website via a crafted link.
Potential impact on your site
Your site could be used to phish visitor credentials or distribute malware without your knowledge.
Conditions required to exploit
Victim must click a malicious link or visit a page containing the redirect.
Key dates
External resources
Related vulnerabilities
